← Back

Keycloak Nodejs Auth Utils

keycloak-nodejs-auth-utils

Vendor: Keycloak • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Keycloak
1Keycloak Nodejs Auth Utils
May 13, 2026
May 12, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduc...Show more
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.Show less